raiciil Claiiiis 



1 . A method for loading input data into an algorithm when performing an 

authentication between electroniccash,caras-and a security module, where the 
5 cardholder may have a stored credit balante available to him or her, and 

where, for every cash tr^saction, the ca/h amount requested or input by the 
cardholder is debited from the cardholder's chip card with the aid of a security 
function, and the cash amounts are adped and stored in a^smmnin^pi^^ for 
cash amounts of the security moduW and where for theauthentication 
10 algorithm, a linear- feedback shift ragister is used, whose non-linear functions 

are cryptographically enhanced in iconj unction with downstre£im counters, and 
where input data, such as a rando/n number, a secret key, and non-secret card 
data, enter into this algorithm, 
wherein input data are subdi viewed into a plurality of blocks of data, and while 
1 5 the blocks are loaded into theilini^-feedback shift register, an additional, 

fiirther feedback is introducQiH irP^o^\shift register following the downstream 
counter and is switched off following a predefined number of clock pulse 
steps. 

20 2. The method as recited in(Claim 1, 

wherein the card data Ej having a secret key K are introduced as a first block, 
and a random numberyR is introduced as an additional block. 

3. The method as recit^ed in Claim 1 and 2, 
25 wherein during ihd phase in which the input data are loaded, other counter 

contents are usedf than during the subsequent phase after the input data are 
loaded to calculate the authentication token. 
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The method as recited in Claim 1 and 2, 
wherein the rirst downstream counter counts to 1 . 
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The method as recited in Claim 1 and 2, 
wherein the counter and the number of clock pulses to be implemented are 
selected with precision so as to ensure that the authentication token is 
calculated based on a number on clock pulses that is fixed by other system 
conditions. 

The method as recited in one Jf Claims 1 through 5, 
wherein the outputting of bits/begins after all input data have been loaded. 
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The method as recited in ond of Claims 1 through 6, 

wherein in the time betweeri the loading of the blocks from Claim 1 and the 
outputting of the bits, the entire circuit continues to be pulsed for several clock 
pulses while the additional feedback is maintain^, without input data being 
loaded. 
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The method as recited ip one of Cls 

wherein in the time betAveen the lobdiifg of the blocks from Claim 1 and the 
outputting of the bits, iftie entire circuit continues to be pulsed for a certain 
number of clock pulsep after the additional feedback is switched off, without 
input data being loaded. 



9. A device for loading input data into an algorithm when performing an 

authentication usini a cryptographic MAC function, made up of a linear- 
feedback shift register having a nonlinear "feed-forward" ftinction, which 
25 reads off from th^ shift register and, using a counter, influences the output of 

the shift register/ to which an additional counter is connected downstream, 
wherein the circuit, which is produced from the linear-feedback shift register 
and which has/downstream counters to be used for the authentication 
algorithm, is aryptographically enhanced by an additional, disconnectable non- 
30 linear feedback. 
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The device as recited in Claim 9, wherein the additional feedback is tapped off 
following the first downstream counter before the latch, X 

The device as recited in Claim 9, wherein the addjtional feedback is read off 
from the latch following the first downstreani^rounter. 

The device as recited in Claim 9, whe^n the additioMl feedback is read off 
following the second downstreainXx)unter. y 

The device as recited in CJ^m 9, whereiiy^e additional fasdback is generated 
as an XOR sum of the/f^adouts following the first downstream counter before 
the latch, from the^fetch following the first downstream counter, and following 
the second dmrastream counter. 

The de?nce as recited in Claim 9, wherein the counters are subdivided or 
redvrced. 



